Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa
File: 5B7F22440AF811ECB423A671C4F9AE02.roa (raw, json)
Hash identifier: TspezYM4IRlokwPfjhl3bMH0Gn30QinDMLtE8ZCLHTk=
Subject key identifier: D8:05:0C:D4:AC:07:0C:52:C4:86:1C:3F:BA:DA:87:7B:D7:6B:A6:9C
Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Certificate serial: 2901
Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa
Signing time: Mon 07 Sep 2026 08:23:07 +0000
ROA not before: Mon 07 Sep 2026 08:23:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 17470
IP address blocks: 43.252.12.0/22 maxlen: 22
43.252.12.0/24 maxlen: 24
43.252.13.0/24 maxlen: 24
43.252.14.0/24 maxlen: 24
43.252.15.0/24 maxlen: 24
103.247.48.0/22 maxlen: 22
103.247.48.0/24 maxlen: 24
103.247.49.0/24 maxlen: 24
103.247.50.0/24 maxlen: 24
103.247.51.0/24 maxlen: 24
203.81.104.0/24 maxlen: 24
203.81.105.0/24 maxlen: 24
203.189.184.0/21 maxlen: 21
203.189.184.0/24 maxlen: 24
203.189.185.0/24 maxlen: 24
203.189.186.0/24 maxlen: 24
203.189.187.0/24 maxlen: 24
203.189.188.0/24 maxlen: 24
203.189.189.0/24 maxlen: 24
203.189.190.0/24 maxlen: 24
203.189.191.0/24 maxlen: 24
2404:8a00::/48 maxlen: 48
2404:8a00:64::/48 maxlen: 48
2404:8a00:65::/48 maxlen: 48
2404:8a00:66::/48 maxlen: 48
2404:8a00:67::/48 maxlen: 48
2404:8a00:68::/48 maxlen: 48
2404:8a00:69::/48 maxlen: 48
2404:8a00:6a::/48 maxlen: 48
2404:8a00:6b::/48 maxlen: 48
2404:8a00:6c::/48 maxlen: 48
2404:8a00:6d::/48 maxlen: 48
2404:8a00:6e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10497 (0x2901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Validity
Not Before: Sep 7 08:23:07 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a9e746b-8e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:71:7e:26:e3:ca:08:3d:ca:6a:1b:b8:e7:
1a:41:c5:00:14:82:0f:5e:98:44:e7:17:66:6e:2c:
e0:ad:90:ca:7d:de:a5:0d:36:d6:da:16:0b:5b:c3:
d3:c9:68:99:43:c4:92:26:d4:3d:4d:54:6b:07:27:
11:d1:cd:88:46:4f:c7:34:1b:e6:82:bc:59:a4:8b:
04:21:d0:d5:5a:d2:53:d0:59:8c:c5:d7:15:98:48:
5c:43:47:2a:a9:2c:ba:25:42:47:8a:35:9c:98:67:
ba:e3:50:e0:f8:97:48:ca:35:54:2e:91:78:a8:76:
f8:72:91:5b:bd:21:27:41:22:cc:22:9c:93:df:3d:
80:47:8e:3c:45:ee:03:86:ac:d4:39:fe:05:6d:94:
87:df:b4:41:e9:87:b7:d4:17:3b:17:8c:98:f0:ec:
21:1c:b0:b1:08:f0:39:16:90:e2:5a:20:0d:a5:a1:
98:90:82:fc:96:c0:25:58:94:a8:2e:88:07:0f:07:
81:64:68:c4:c5:d7:23:34:90:f9:aa:2e:da:3a:5b:
7b:27:df:25:9b:74:cc:b6:99:56:35:a1:0f:b0:d6:
09:d8:b7:a9:95:1f:9b:9b:07:a2:ca:4f:70:91:28:
fa:7b:07:43:35:cf:18:b5:1c:d7:47:26:81:e7:db:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:0C:D4:AC:07:0C:52:C4:86:1C:3F:BA:DA:87:7B:D7:6B:A6:9C
X509v3 Authority Key Identifier:
keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.252.12.0/22
103.247.48.0/22
203.81.104.0/23
203.189.184.0/21
IPv6:
2404:8a00::/48
2404:8a00:64::-2404:8a00:6e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:22:aa:d4:a2:36:83:c8:35:c1:5c:2c:48:aa:0d:5f:88:58:
2f:9c:8f:38:73:96:0f:ef:a6:7c:94:4a:c8:ed:eb:66:00:4a:
0c:61:5f:c5:ab:d7:f2:d8:04:58:6f:e6:c1:d9:ef:39:87:1d:
50:89:d9:c5:71:3e:f9:a6:63:ca:5b:84:e1:b8:98:e3:66:4f:
e8:dc:fe:de:74:6b:ab:44:75:50:5e:6a:31:6f:8e:3e:c5:9a:
b4:f9:8f:23:0c:95:3d:f5:a7:4c:c9:92:81:96:94:79:20:cf:
cf:e5:64:2c:0e:a1:99:58:a9:d2:8c:f0:0e:4b:41:87:3b:67:
be:b8:1a:bd:50:49:39:48:5b:42:e9:ee:d4:d5:4b:fb:61:47:
f6:14:5e:a0:b9:b6:6a:90:25:82:d1:eb:df:e4:29:5d:e5:3b:
da:d4:76:ef:fb:cf:bf:f0:aa:17:77:d4:2e:3c:ed:a9:75:87:
34:dc:dd:aa:f5:a5:6c:ee:d7:82:83:69:b3:f6:56:b2:91:7d:
51:22:98:1b:99:b2:71:e8:c6:a1:bf:f5:4f:0b:a5:7a:1f:29:
64:6f:cc:bf:b3:23:62:33:e8:84:18:17:43:3c:35:a4:d3:82:
80:3f:0e:d3:f7:94:58:c2:19:ba:f5:c2:96:92:87:f7:c7:1a:
88:f4:3d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:44:20 2026 by rpki-client